Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/03/2024, 10:31

General

  • Target

    e1733c8d3fae04946523a9958337ba93.exe

  • Size

    968KB

  • MD5

    e1733c8d3fae04946523a9958337ba93

  • SHA1

    81856ff55c0e0a2d35d999a0520f3c95162f2bf6

  • SHA256

    dcea4fd8cd1d1441c24aa3adc9ebeaad2c44502cddd98953ac0584d19b3df443

  • SHA512

    9201ebdfec7cc2e04556f84125c0dd7c5746d8f4542e371c9598a73c702be8e188d38ce093e9b492912d4a80a52180c0a23e909699e1228c250d232e04b54785

  • SSDEEP

    12288:tvskKHjlikRStqqJXIJtHTQ6ko0Gn3FYGq6TIbtSx1/Xgy8F6vBAU+Q7JFW/Vm2T:/zfJXWEUnVYyTzXgyz+MFWxX0hU

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e1733c8d3fae04946523a9958337ba93.exe
    "C:\Users\Admin\AppData\Local\Temp\e1733c8d3fae04946523a9958337ba93.exe"
    1⤵
      PID:5028
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5028 -s 272
        2⤵
        • Program crash
        PID:1472
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5028 -ip 5028
      1⤵
        PID:5108
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3792 --field-trial-handle=2232,i,11267738607351977302,107266978269557304,262144 --variations-seed-version /prefetch:8
        1⤵
          PID:348

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/5028-1-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-3-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-0-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-5-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-6-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-8-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-9-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-11-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-14-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-16-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-13-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-18-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-20-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-22-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-24-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-26-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-28-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-30-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-32-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-35-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-34-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-37-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-40-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-42-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-39-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-43-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-46-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-45-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-48-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-49-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-51-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-52-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-55-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-57-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-59-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-61-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-63-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-65-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-67-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-68-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-70-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-71-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-73-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-75-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-78-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-80-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-83-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-85-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-87-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-89-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-97-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-106-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-108-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-121-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-135-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-137-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-144-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-146-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-156-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-158-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-155-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-161-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-173-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-171-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-175-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-179-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-186-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-190-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-188-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-192-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-196-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-199-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-201-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-205-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-212-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-214-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-230-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-232-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-237-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-242-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-240-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-246-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-248-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-250-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-253-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-251-0x00000000776F2000-0x00000000776F3000-memory.dmp

          Filesize

          4KB

        • memory/5028-257-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB

        • memory/5028-258-0x0000000000670000-0x00000000006DC000-memory.dmp

          Filesize

          432KB